MrGray
Honorary Master
Yeah, the one time ransomware got into our LAN was via RDP to a Windows 7 PC. RDP is quite insecure on the older versions of Windows, especially if not kept updated. There have been a few exploits where they need not have brute forced the password - e.g. https://en.wikipedia.org/wiki/BlueKeep
If you absolutely must use RDP via NAT don't use the std RDP port on your router, i.e. redirect another arbitrary port to the internal RDP port and also lock it down to specific external IP addresses if possible, but first prize would be to use some kind of a VPN solution.
If you absolutely must use RDP via NAT don't use the std RDP port on your router, i.e. redirect another arbitrary port to the internal RDP port and also lock it down to specific external IP addresses if possible, but first prize would be to use some kind of a VPN solution.
